Job Title: ServiceNow GRC / IRM / VR / SIR Architect (On-site) Experience: 8+ Years Location: KSA Work Mode: (Saudi - On-site) Employment Type: Full-Time

About the Role We are seeking a highly experienced

ServiceNow GRC / IRM / VR / SIR Architect

to lead the architecture, design, implementation, and optimization of enterprise-wide

Governance, Risk, Compliance, Vulnerability Management, and Security Incident Response

solutions on the ServiceNow platform. The ideal candidate will bring strong expertise across

ServiceNow Integrated Risk Management (IRM/GRC), Vendor Risk Management (VRM), Vulnerability Response (VR), and Security Incident Response (SIR) , combined with excellent ServiceNow platform architecture, integration, and stakeholder-management skills. This role will work closely with

Risk, Compliance, Internal Audit, Cybersecurity, Information Security, IT, Procurement, and business leadership

to deliver scalable and automated solutions aligned with enterprise and regulatory requirements. Key Responsibilities ServiceNow Architecture Lead end-to-end

solution and technical architecture

for ServiceNow GRC/IRM, VRM, VR, and SIR. Define architecture standards, technical roadmap, data models, integration patterns, security, and governance. Conduct architecture and requirements workshops with business and technical stakeholders. Translate complex business, cybersecurity, risk, compliance, and regulatory requirements into scalable ServiceNow solutions. Review existing implementations and recommend optimization, automation, modernization, and standardization opportunities. Provide technical leadership to ServiceNow developers, administrators, integration teams, and implementation partners. GRC / Integrated Risk Management Design and implement

Risk Management, Policy & Compliance, Audit Management, Regulatory Change, Control Management, Assessments, Issues, and Remediation

solutions. Design risk frameworks, risk statements, controls, indicators, assessments,



attestations, issues, and remediation processes. Develop automated workflows for risk identification, assessment, treatment, monitoring, and reporting. Support regulatory and industry frameworks such as

SOX, NIST, ISO 27001, PCI DSS, SOC 2, GDPR , and other applicable standards. Improve enterprise risk visibility through dashboards, reporting, metrics, and automation. Vendor / Third-Party Risk Management Architect

Vendor Risk Management (VRM)

and third-party risk solutions. Design vendor onboarding, due diligence, inherent risk assessments, questionnaires, control assessments, remediation, and ongoing monitoring. Integrate vendor risk processes with procurement, vendor management, cybersecurity, and enterprise risk functions. Vulnerability Response Architect and optimize

ServiceNow Vulnerability Response (VR)

solutions. Design vulnerability ingestion, normalization, prioritization, assignment, remediation, exception, and closure processes. Integrate vulnerability management platforms with ServiceNow. Develop risk-based vulnerability prioritization using

asset criticality, business impact, severity, exploitability, and threat intelligence . Integrate Vulnerability Response with

CMDB, ITSM, SIR, and Security Operations . Security Incident Response Design and implement

ServiceNow Security Incident Response (SIR)

solutions. Develop security incident workflows covering identification, enrichment, prioritization, investigation, containment, remediation, and closure. Integrate ServiceNow with

SIEM, SOAR, EDR, threat intelligence, vulnerability management,



and other cybersecurity platforms . Establish automation and orchestration to improve security incident response and operational efficiency. Integration & Technical Skills Strong experience with

REST/SOAP APIs, IntegrationHub, MID Server, Import Sets, Transform Maps, web services, and scripted integrations . Experience integrating ServiceNow with enterprise and security platforms including

SIEM, EDR, vulnerability scanners, CMDB, ITSM, IAM, procurement, and GRC systems . Strong knowledge of ServiceNow platform capabilities including: Flow Designer Business Rules Script Includes Client Scripts UI Policies ACLs Roles & Groups Notifications Reporting & Dashboards Strong

JavaScript / ServiceNow scripting

skills. Understanding of ServiceNow security, performance, upgrades, application lifecycle management, and platform governance. Required Experience 8+ years of overall ServiceNow experience

with significant architecture experience. 5+ years of experience in ServiceNow GRC/IRM and/or SecOps . Solid hands-on experience with

IRM/GRC, VRM, Vulnerability Response, and Security Incident Response . Proven experience leading complex, enterprise-scale ServiceNow implementations. Strong understanding of

enterprise risk, compliance, audit, cybersecurity, vulnerability management, and security incident processes . Experience working with global stakeholders and distributed delivery teams. Excellent communication, presentation, problem-solving, and stakeholder-management skills. Preferred Certifications ServiceNow Certified System Administrator ( CSA ) ServiceNow Certified Application Developer ( CAD ) ServiceNow

IRM/GRC Implementation Specialist ServiceNow

Security Operations / Vulnerability Response certifications ServiceNow

Certified Technical Architect (CTA)

– highly desirable CISA, CISM, CISSP, CRISC

or equivalent cybersecurity/risk certification – preferred

📌 ServiceNow GRC / IRM / VR / SIR Architect (On-site) (Mumbai)
🏢 AvanteNow
📍 Mumbai